Appl.No.: 10/791,452 PATENT 
Amdt. dated: February 7, 2006 
Preliminary Amendment 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 . (previously presented) A storage subsystem which is connected to a 
host computer through a communication line, comprising 

an interface which is used for connecting to said communication line, wherein, 
said interface comprises a first filter which judges, on the occasion of having 
received communication packets from said communication line, whether there is a 
communication packet with a predetermined format for use in an access to said storage 
subsystem, among the communication packets; 

wherein said interface further comprises 

a traffic measuring and judging unit which measures traffic of all 
communication packets received in the interface, and traffic of a communication packet 
judged not to be the packet with said format in said first filter, respectively, and by using the 
both traffics, judges whether a communication failure is generated or not, and 

a communication failure alerting unit which alerts a management server 
connected to said storage subsystem and comprises a function of displaying information 
alerted, in case that it is judged that a communication failure is generated in said traffic 
measuring and judging unit. 

2. (original) The storage subsystem according to Claim 1, wherein, 
said interface further comprises a second filter which receives the 

communication packet judged to be for said access in said first filter, and judges whether it is 
a communication packet permitted to access to a storage area in said storage subsystem and 
transmitted from said host computer or not. 

3. (original) The storage subsystem according to Claim 2, wherein, 
in case that said host computer is permitted to access to said storage 

subsystem, said interface further comprises an access permission table having information 
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which uniquely specifies the host computer, and information which specifies a storage area in 
said storage subsystem to which the host computer is permitted to access, and 

said second filter judges whether a communication packet judged to be for use 
in said access is transmitted from the host computer permitted to access or not, in accordance 
with information stored in said access permission table. 

4. (canceled) 

5. (previously presented) The storage subsystem according to Claim 1, 

wherein, 

said traffic measuring and judging unit further measures traffic of a 
communication packet judged not to be the communication packet transmitted from said host 
computer which is permitted to access in said second filter, and by using the traffic and said 
traffic of all communication packets, further judges whether a communication failure is 
generated or not. 

6. (original) The storage subsystem according to Claim 5, wherein, 
said interface further comprises 

a traffic log recording unit which records, as a traffic log, communication 
information of a communication packet judged not to be the communication packet with said 
format in said first filter and a communication packet judged not to be the cornmvinication 
packet transmitted from said host computer permitted to access in the second filter. 

7. (original) A management server connected to the storage subsystem 
according to Claim 6, wherein, 

an improper communication source analyzing unit which refers to said traffic 
log, in case that it is alerted from a communication failure alerting unit of said storage 
subsystem that a communication failure is generated, and searches a source of said 
communication packet causes the communication failure. 

8. (original) The management server according to Claim 7, further 

comprising, 
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a relay device control unit which controls, based on information of a source 
searched in said improper communication source analyzing unit, a relay device which relays 
communication to said storage subsystem disposed on said communication line so as to cut 
off communication from the source. 

9. (previously presented) A computer readable storage medium including 
a program for a computer mounted on a storage subsystem connected to a host computer 
through a communication line, the program comprising: 

code for connecting to said communication line; 

code forjudging, on the occasion of having received communication packets 
from said communication line through connecting to said communication line, whether there 
is a communication packet with a predetermined format for use in an access to said storage 
subsystem, among the communication packets; 

code for receiving the communication packet judged to be for said access in 
said judging, and judges whether it is a communication packet permitted to access to a 
storage area in said storage subsystem and transmitted from said host computer or not; 

code for measuring traffic of all communication packets received in 
connecting to said communication line, and traffic of a communication packet judged not to 
be the packet with said format in said first filter, respectively, and by using the both traffics, 
judging whether a communication failure is generated or not; and 

code for alerting a management server connected to said storage subsystem 
and displaying information alerted, in case that it is judged that a communication failure is 
generated in measuring said traffic of all communications packets received in connecting to 
said communication line. 

10. (canceled) 

1 1 . (canceled) 

12. (previously presented) A computer readable storage medium including 
a program for a computer mounted on a management server which is connected to a storage 
subsystem, the program comprising: 
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code for referring to said traffic log, in case that it is alerted from a 
communication failure alerting unit of said storage subsystem that a communication failure is 
generated, and searching a source of said communication packet which causes the 
communication failure. 

13. (previously presented) A computer readable storage medium including 
a program for a computer mounted on a management server which is connected to a storage 
subsystem, the program comprising: 

code for referring to said traffic log, in case that it was alerted from a 
communication failure alerting unit of said storage subsystem that a communication failure is 
generated, and searching a source of said communication packet which causes the 
communication failure, and 

code for controlling, based on information of a source searched in said 
searching, a relay device which relays communication to said storage subsystem disposed on 
said communication line for receiving a communication packet so as to cut off 
communication from the source. 

14. (canceled) 

15. (previously presented) A storage system in which a storage subsystem, 
a host computer, and a management server are connected by a communication line, wherein, 

said storage subsystem comprises an interface which connects to said 
communication line, and 

said interface comprises, 

a first filter which judges, on the occasion of having received 
communication packets from said communication line, whether there is a 
communication packet with a predetermined format for use in an access to said 
storage subsystem, among the communication packets, 

a second filter which receives the communication packet judged to be 
for said access in said first filter, and judges whether it is a communication packet 
permitted to access to a storage area in said storage subsystem and transmitted from 
said host computer or not, 
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a traffic measuring and judging unit which measures traffic of all 
communication packets received in the interface, and traffic of a communication 
packet judged not to be the packet with said format, respectively, and by using the 
both traffics, judges whether a communication failure is generated or not, 

a communication failure alerting unit which alerts said management 
server, in case that it is judged that a communication failure is generated in said traffic 
measuring and judging unit, and 

a traffic log recording unit which records, as a traffic log, 
communication information of a communication packet judged not to be the 
communication packet with said format in said first filter and a communication packet 
judged not to be the communication packet transmitted from said host computer 
permitted to access in the second filter, and 
said management server comprises 

a display device which displays the alert received from said 
communication failure alerting unit, 

an improper communication source analyzing unit which refers to said 
traffic log, in case that it is alerted from a communication failure alerting unit of said 
storage subsystem that a communication failure is generated, and searches a source of 
said communication packet which causes the communication failure, and 

a relay device control unit which controls, based on information of a 
source searched in said improper communication source analyzing unit, a relay device 
which relays communication to said storage subsystem disposed on said 
communication line so as to cut off communication from the source. 

16. (original) The storage system according to Claim 15, wherein, 
in case that said host computer is permitted to access to said storage 
subsystem, said interface further comprises an access permission table having information 
which uniquely specifies the host computer, and information which specifies a storage area in 
said storage subsystem to which the host computer is permitted to access, and 

said second filter judges whether a communication packet judged to be for use 
in said access, is transmitted from the host computer permitted to access or not, in accordance 
with information stored in said access permission table. 
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17. (original) The storage system according to Claim 15, wherein, 
said traffic measuring and judging unit further measures traffic of a 

communication packet judged not to be the communication packet transmitted from said host 
computer permitted to access in said second filter, and by using the traffic and said traffic of 
all communication packets, further judges whether a communication failure is generated or 
not. 

18. (original) The storage system according to Claim 17, wherein, 
said traffic measuring and judging unit further measures traffic of a 

communication packet judged to be the communication packet transmitted from said host 
computer permitted to access in said second filter, and by using the traffic and said traffic of 
all communication packets, judges whether a value of a ratio of traffic of a communication 
packet transmitted from said host computer permitted to access to traffic of all 
communication packets is less than a predetermined value or not, and 

said communication failure alerting unit alerts said management server of the 
alert which indicates that second communication failure is generated, in case that it is judged 
that the value of the ratio is less than the predetermined value in the traffic measuring and 
judging unit, and 

said management server further comprises a QoS condition designating unit 
which, in case of having received the alert which indicates that the second communication 
failure is generated from said communication failure alerting unit, readjusts a network QoS 
between said storage subsystem and said host computer, which has been set up in advance by 
an administrator. 

19. -20. (canceled) 

21 . (previously presented) The storage subsystem according to Claim 1, 
wherein a header of the communication packet with the predetermined format includes 
information which shows that an iSCSI command is encapsulated in the communication 
packet. 

22. (previously presented) The storage system according to Claim 18, 
wherein a header of the communication packet with the predetermined format includes 
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information which shows that an iSCSI command is encapsulated in the communication 
packet. 
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